Package: postfix-policyd-spf-perl Version: 2.005-1 Severity: important Mail which is received at a primary MX, (which is running postfix-policyd-spf-perl) and has transited through either a backup MX or a non-SRS forwarder will be incorrectly marked an spf violation (hard, or soft) by postfix-policyd-spf-perl.
There should be a way to automatically whitelist backup MX hosts, with an additional mechanism to whitelist other hostnames, or IP addresses (such as forwarders, or secondary IP addresses of MX hosts - in the case where the backup MX is multi-homed, or where mail stored-and-forwarded by a backup MX otherwise is submitted from a different IP to the published A record of the backup MX). A workaround is to list the IP addresses of such machines in the postfix "mynetworks" configuration parameter, but this workaround turns the primary MX into a willing relay for the backup MXes, or forwarders (probably not a serious problem, but still undesirable). It is also brittle, as the IP address of a backup MX may legitimately be changed without the administrator of the primary MX being notified. Thanks! Tim. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.23-1-amd64 Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1) Versions of packages postfix-policyd-spf-perl depends on: ii libmail-spf-perl 2.005-1 Perl implementation of Sender Poli ii libnetaddr-ip-perl 4.007+dfsg-2 Manipulate IP Addresses easily ii libversion-perl 0.6701-1 Perl extension for Version Objects ii perl 5.8.8-7etch1 Larry Wall's Practical Extraction ii postfix 2.3.8-2 A high-performance mail transport postfix-policyd-spf-perl recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
